Last Updated 11th June 2026

Privacy notice: Prospective and current network members

This Privacy Notice explains how The Right Mortgage Ltd (“we”, “us”, “our”) collects and uses your personal information when you apply to join, or are part of, our network as an Appointed Representative or associated individual.

The Right Mortgage Ltd is the data controller responsible for your personal information.

Contact details

If you have any questions about this notice or your data, please contact:

Email: dpo@therightmortgage.co.uk
Address: St Johns Court, 70 St Johns Close, Knowle, Solihull, B93 0NH

You have the right to complain to the Information Commissioner’s Office (ICO) (www.ico.org.uk), although we encourage you to contact us first.

The data we collect about you

We collect and process personal data relevant to your role within our network, including:

  • Identity and contact details (e.g. name, address, email, phone number)
  • Employment and business information (e.g. role, firm details, income, business activities)
  • Financial and background information (e.g. credit history, financial standing, regulatory checks)
  • Application and onboarding information (e.g. forms, supporting documents, due diligence checks)
  • Communications (e.g. emails, call recordings, support queries)

We may also process limited technical data where you interact with our systems.

How we collect your data

We collect personal data from:

  • You directly (e.g. application forms, correspondence)
  • Appointed Representatives and firms within our network
  • Third parties such as credit reference agencies, regulators, and verification providers
  • Public sources (e.g. Companies House, Electoral Register, FCA Register)

How we use your personal data

We use your personal data to:

  • Assess and process your application to join our network
  • Manage our relationship with you and your firm
  • Provide services and support to you as a network member, via ourselves and third parties where necessary
  • Meet our legal and regulatory obligations (including FCA and anti-money laundering requirements)
  • Maintain records, monitor performance, and ensure compliance within our network
  • Prevent fraud and financial crime
  • Assist our lender and product providers in providing support around their products and services

Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract – to assess your application and manage our relationship with you
  • Legal obligation – to meet regulatory and statutory requirements
  • Legitimate interests – to operate and improve our business, maintain records, and prevent fraud, provided your rights do not override these interests

Special category data

In limited circumstances, we may process special category data (e.g. health or background information where relevant to regulatory requirements).

We will only do this where:

  • You have given explicit consent; or
  • Processing is necessary for regulatory or legal purposes in line with data protection law

You have the right to withdraw consent at any time where consent is relied upon.

Who we share your data with

We may share your personal data with:

  • Regulators such as the Financial Conduct Authority (FCA)
  • Lenders, insurers, and product providers where relevant
  • Third-party service providers (e.g. CRM systems, compliance and verification providers)
  • Professional advisers (e.g. legal, audit, compliance support)
  • Law enforcement or authorities where required by law

All third parties are required to respect the security of your personal data and process it in accordance with the law.

International transfers

Your data is primarily stored within the UK and EEA. Where data is transferred outside these areas, we ensure appropriate safeguards are in place, such as adequacy decisions or approved contractual clauses.

Artificial Intelligence (AI) Processing

We may use Artificial Intelligence (AI) systems to support administrative processes, compliance monitoring, and the detection of financial crime.

These systems are used only to assist decision-making. All outcomes are subject to human review, and no decisions are made solely by automated means.

All AI systems operate within appropriate security and data protection standards and in line with the lawful bases set out in this notice.

Data security

We have appropriate technical and organisational measures in place to protect your personal data from unauthorised access, loss, or misuse. Access is limited to those who have a legitimate business need.

Data retention

We retain your personal data only for as long as necessary to meet legal and regulatory requirements. This typically includes:

  • Network member records: up to 6 years after the end of the relationship
  • Anti-money laundering records: 5 years after the end of the relationship

We may retain data longer where required for legal or regulatory reasons.

Your data protection rights

Under data protection law, you have certain rights, including:

  • Your right of access – You have the right to ask us for copies of your personal information.
  • Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

To exercise your rights, please contact us at dpo@therightmortgage.co.uk.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at dpo@therightmortgage.co.uk.

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: www.ico.org.uk

Changes to this notice

We keep this Privacy Notice under review and may update it from time to time. The latest version will always be available on request.

Third-party links

Our systems or communications may include links to third-party websites. We are not responsible for their privacy practices.